I couldn't remove the heatsinks

#/proc/cpuinfo

system type             : 96338W
processor               : 0
cpu model               : BCM6338 V1.0
BogoMIPS                : 239.20
wait instruction        : no
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : no
unaligned access        : 16175
VCED exceptions         : not available
VCEI exceptions         : not available

Looking at the original GPL sourcecode v1.10 (bcmnet.h) I have found that the switch chipset is a BCM5325

The original GPL sourcecode v1.10 can be downloaded Here. It consist on a Linux 2.6.8.1 kernel with binary Broadcom tools&drivers and sourcecode of the kernel and the rest of tools.

The lastest original firmware (v1.21 at 21/06/2010) can be found Here

# ./analyzetag -t bc310 -i EU_DSL-2542B_1.21_10192009_CFE

Broadcom image analyzer - v0.1.0
Copyright (C) 2009 Daniel Dickinson
Tag Version: 6
Signature 1: Broadcom Corporatio
Signature 2: ver. 2.0
Chip ID: 6338
Board ID: 96338W
Bigendian: true
Image size: 0029f84e, 2750542
CFE Address: bfc00000, 3217031168
CFE Length: 0000f35c, 62300
Flash Root Address: bfc10100, 3217096960
Flash Root Length: 0020b000, 2142208
Flash Kernel Address: bfe1b100, 3219239168
Flash Kernel Length: 000854f2, 546034
Vendor information: 
Image CRC: bc972a30   [Computed Value: 7e29b4f5]
Rootfs CRC:             [Computed Value: 651ea864]
Image CRC from sections: bc972a30   [Computed Value: 7e29b4f5]
Header CRC: 4a6079fd   [Computed Value: 4a6079fd]
Kernel CRC: 7098a85e   [Computed Value: 2e54128c]
Rootfs CRC: bdac1a5e   [Computed Value: 64a81e65]

dmesg of the original firmware EU_DSL-2542B_1.21_10192009_CFE just after installing it:

# dmesg Linux version 2.6.8.1 (root@mochow) (gcc version 3.4.2) #1 Mon Oct 19 10:35:09 CST 2009 Parallel flash device: name AM29LV320B, id 0x22f9, size 4096KB 96338W prom init CPU revision is: 00029010 Determined physical RAM map: memory: 00fa0000 @ 00000000 (usable) On node 0 totalpages: 4000 DMA zone: 4000 pages, LIFO batch:1 Normal zone: 0 pages, LIFO batch:1 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 brcm mips: enabling icache and dcache... Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 8kB 2-way, linesize 16 bytes. PID hash table entries: 64 (order 6: 512 bytes) Using 120.000 MHz high precision timer. Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 13920k/16000k available (1448k kernel code, 2060k reserved, 203k data, 68k init, 0k highmem) Calibrating delay loop... 239.20 BogoMIPS Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Checking for 'wait' instruction... unavailable. NET: Registered protocol family 16 Total Flash size: 4096K with 71 sectors File system address: 0xbfc10100 Can't analyze prologue code at 80178ad4 Initializing Cryptographic API PPP generic driver version 2.4.2 NET: Registered protocol family 24 Using noop io scheduler bcm963xx_mtd driver v1.0 brcmboard: brcm_board_init entry ======= GPIO CONFIG_BCM96338 inited ======== Serial: BCM63XX driver $Revision: 3.00 $ ttyS0 at MMIO 0xfffe0300 (irq = 10) is a BCM63XX u32 classifier NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 512 bind 1024) Initializing IPsec netlink socket NET: Registered protocol family 1 NET: Registered protocol family 17 NET: Registered protocol family 15 Ebtables v2.0 registered NET: Registered protocol family 8 NET: Registered protocol family 20 802.1Q VLAN Support v1.8 Ben Greear All bugs added by David S. Miller VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 68k freed Algorithmics/MIPS FPU Emulator v1.5 atmapi: module license 'Proprietary' taints kernel. adsl: adsl_init entry blaadd: blaa_detect entry Broadcom BCMPROCFS v1.0 initialized Broadcom BCM6338A2 Ethernet Network Device v0.3 Oct 19 2009 10:33:20 Config Ethernet Switch Through MDIO Pseudo PHY Interface dgasp: kerSysRegisterDyingGaspHandler: eth0 registered eth0: MAC Address: 00:26:5A:75:EC:08 BCM63XX_USB: USB device not detected. BcmAdsl_Initialize=0xC0068808, g_pFnNotifyCallback=0xC0081514 AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00000980 adsl2=0x00000000 pSdramPHY=0xA0FFFFF8, 0xB9E3 0xDEAC34EF AdslCoreHwReset: AdslOemDataAddr = 0xA0FFCE54 AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00000980 adsl2=0x00000000 dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered eth0 Link UP. ATM proc init !!! ip_tables: (C) 2000-2002 Netfilter core team ip_conntrack version 2.1 (125 buckets, 0 max) - 400 bytes per conntrack ip_conntrack_pptp version 2.1 loaded ip_nat_pptp version 2.0 loaded ip_ct_h323: init success ip_nat_h323: init success ipt_time loading ip_conntrack_rtsp v0.01 loading ip_nat_rtsp v0.01 loading device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: topology change detected, propagating br0: port 1(eth0) entering forwarding state set vlan_id 65535 vlan_priority 65535 device nas_0_8_35 entered promiscuous mode br0: port 2(nas_0_8_35) entering learning state br0: topology change detected, propagating br0: port 2(nas_0_8_35) entering forwarding state ioctl, p_name=diapd eth0 Link DOWN. br0: port 1(eth0) entering disabled state eth0 Link UP. br0: port 1(eth0) entering learning state br0: topology change detected, propagating br0: port 1(eth0) entering forwarding state

Config from CEF

Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.100  
Gateway IP address                :   
Run from flash/host (f/h)         : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Board Id (0-9)                    : 96338W  
Number of MAC Addresses (1-32)    : 12  
Base MAC Address                  : f0:7d:68:68:xx:xx  
PSI Size (1-64) KBytes            : 24